IP network services have brought such benefits and convenience to people’s life, work, business, investment, consumption, and entertainment that the whole society is relying more and more on them. The All-IP network, a future uniform IP bearer of data, voice and video, together with the multi-service operation over it, is attracting more and more attention from operators. It has become a hot topic in the industry at this time of centrury beginning.

However, because the IP network rises with Internet, as a multi-service bearer, its best effort transport and campus network architecture are challenged by the network security, reliability and manageability of carrier-class operation. Transformation from the best effort structure to a reliable, secure, and controllable carrier-class network, therefore, becomes necessary.

During the transformation, the traditional IP network is subject to the following challenges:

• Security Challenges

  All IP network is open. It allows all service terminals to access from anywhere at any time. The security access control of an ALL IP network, therefore, becomes a critical issue. The security of an IP network concerns four aspects:

  First, how to authenticate the legitimacy and creditability of service terminals that request to (users) access. Bearer services are complex. The network must enable varied means to authenticate the identity of a terminal to prevent account forgery and avoid harm to the network caused by attacks or service theft.

  Second, how to control terminal traffic. When a terminal accesses, its traffic must conform to the service agreement. Therefore, the network must achieve access control to restrict the ability and right of a terminal to access the network and other terminals and ensure that the terminal obtains services from the network in accordance with the defined service scope. Such control can prevent uncontrollable traffic from threatening other terminals and consuming network resources.

  Third, how to ensure service security. A multi-service bearer network must be able to detect illegal services and take actions in real time to prevent illegal traffic from eating up network resources.

  Forth, how to ensure network security. All kinds of network attack and embezzlement are threatening the normal operation of the network. A multi-service bearer network must assure all-round network security, to prevent harms to network security from many a possible attack.

• Operability and Manageability Challenges

  In early IP networks, access, aggregation, forwarding and service layers are not clearly distinguished. The IP network is incapable of realtime service detection and therefore unable to change dynamically with the service. The operator has little control of services carried over the IP network. As a result, diversified services have not created significant increase of benefits. The expansion of bandwidth only benefits ISPs and ICPs of voice, IM and games with cheap network resources. The operator can but rue the losses because it is incapable of network management specific to differentiated services.

  The future oriented multi-service IP bearer market requires fast service deployment and flexible service management. The operator can promote its operation benefits only by providing more and better experience for telecommunications users.

  Hence, how to achieve controllable network service is included in the agenda of the day.

• QoS Challenges

  Telecommunications users’ requirements on Service Level Agreement (SLA) are increasing. The pressure on network maintenance is also growing. In a multi-service bearer network, however, many types of services are transported over a same network and therefore the network must provide different QoS assurance for different types of services. The best effort manner will inevitably result in disorder contention for network resources. With it, an effective SLA is impossible. A multi-service IP bearer must support the agreement mechanism. Once an agreement is entered, it must provide assured services in accordance with the commitment. Especially in the case of realtime voice and video, carrier-class control mechanism must be applied to realize service-based QoS guarantee and management.

  Then it becomes critical to find a suitable technology and solution to guarantee the service level of the IP bearer network.

Huawei MSCG Broadband Multi-Service Bearer Solution

As shown in the figure below, the flat and hierarchical network structure enables the IP network to bear multiple services. The aggregation layer forwards and controls services.

This solution optimizes the IP network in the following aspects:

• Access mode is unrelated to the core network. At the network edge, the aggregation layer screens the difference of access modes and realizes convergence of the access layer. As services are carried over a uniform IP/MPLS core, cost for repetitive construction of the service network is spared.
• Functional planes are clear. The hierarchical structure divides the network to several planes including access, aggregation, core and application. The functionalities of equipment serving different planes are designed for specific purposes, which facilitates the ease of management and the scalability of services. Such mode allows for modular and simple network management and saves the network OPEX.
• Traffic converges at the network edge. Aggregation is to gather services from different access networks to the uniform core network for more efficient distribution. It simplifies access network management and improves the efficiency of network operation.

This solution intends for a simple IP network as a controllable, operable multi-service bearer. The edge aggregation solution and its basic utilities are especially important.

In the solution, the network edge aggregation layer controls service security and QoS to ease access network management and ensure that services accessed to the core are from legal identities. All traffic converges at the network edge before flowing to the core or access network. The aggregation capability of the aggregation layer equipment is then critical for effective operation support and management. Therefore, in an IP multi-service bearer network, the large capacity multi-service control gateway (MSCG) must be installed at the core network edge to check the legality of all user requests, realize dynamic service detection and differentiation, execute policy control, guarantee QoS, allocate network resources, and distribute traffic flows. The MSCG plays a vital role at the MAN edge.

To help operators realize broadband IP multi-service operation, Huawei has launched its large capacity MSCG, the ME60, which provides rich bearer control capabilities and carrier-class reliability. ME60 resolves the worries for IP multi-service bearer control:

Network Security

As a large capacity MSCG, ME60 considers securty control at the access, network and service layers:

• Access Layer Security

  1) ME60 authenticates the identity of terminals in the username+password or DHCP+ mode. This can effectively prevent account forgery. Such authentication differentiates between Internet access of PCs and IPTV access of STBs.

  2) The strong quintuplet based ACL flexibly controls accesses to the network. It assures that a terminal can only obtain network services within the allowable service scope.

  3) ME60 integrates Session Border Control (SBC) functions. At the border of access aggregation, it functions as the signaling agent of SIP, MGCP, H.248, and H.323 and the media agent of RTP/RTCP and HTTP for IP sessions. It also realizes the NAT/FW, supervision and measurement of media streams. All these guarantee the secure access of voice terminals.

• Network Layer Security

  1) ME60 utilizes ACL to isolate network layer resources, control network layer traffic, and ensure network layer transport security.
  2) ME60 supports rich protocol authentication means to guarantee service security at the network layer.

  3) For VoIP, ME60 isolates the NGN network and public terminals.

  4) ME60 integrates the state inspection firewall and Pinhole firewall. It can prevent all types of network attacks.

• Service Layer Security

  The adoption of Deep Packet Inspection (DPI) can detect terminal services, supervise P2P traffic, analyze active packets, and enable policy control. Thus, ME60 can effectively prevent illegal traffic, ensure reasonable utilization of bandwidth, and guarantee network security. It allows the operator to execute content based charging and avoid unlimited consumption of network bandwidth.

Operability and Manageability

ME60 provides DPI based service management and Dynamic Service Gateway (DSG) based service operation to promote the operability and manageability of the whole network.

In terms of service management, ME60 uses DPI to differentiate service at the application layer and further apply different control policies according to the service type. The adoption of DPI changes the extensive management status to service based intensive network management and transforms the operator from “a pipeline provider” to “an integrated information provider”. DPI enables the operator to provide different service policies for different contents. DPI also enables the operator to have a correct idea of the network trend, making the network value increase because of services rather than bandwidth.

In terms of service operation, ME60 provides the DSG solution. With the DSG solution, users can select required services or bandwidth dynamically. Users can choose appropriate service parameters to achieve best service experience.

With the cooperation of flat hierarchical networking and the DSG solution, the operator can deploy value-added services quickly. Such a solution enables network resources to create significant and sustainable benefits for the operator through service operation.

Global QoS Guarantee

ME60 realizes global QoS guarantee from two aspects: excellent QoS performance and global QoS solution.

ME60 is capable of QoS control by stream classification, bandwidth control, priority scheduling and congestion avoidance, thus providing realtime bandwidth monitoring and quality QoS guarantee for any service of any user. ME60 also provides hierarchical scheduling by embedding a 5-level scheduler. When congestion occurs at some point in the access network, hierarchical scheduling can assure that important services are not lost. It guarantees the precedence of gold users over non-gold users. This avoids the weakening of bearer capability in the whole access network due to congestion at one node.

In terms of global QoS solution, ME60 works with the network resource manager to provide Connection Admission Control (CAC), thus realizing reasonable utilization of network bandwidth.

In this solution, when a user initiates a request for a value-added service, the network resource manager judges whether the network has enough bandwidth resources to assure this service. When it finds that the resource is insufficient, it rejects the request. It only accepts the request when the bandwidth resource is sufficient. Then ME60 executes corresponding policy control of bandwidth, priority and QoS, and differentiates the service. ME60 provides realtime bandwidth monitoring and traffic evacuation for any service of any user to ensure that the operator provides quality assured services to telecommunications users once they are provisioned.

With this solution, broadband network services and resources interact with each other virtuously, which avoids the unchained consumption of resources due to the early best effort transmission. The QoS in the whole network is thus guaranteed and telecommunication users will have good experience when using the broadband network.

To sum up, in the solution of IP multi-service bearer and operation, the MSCG is playing an unsubstitutable role to push the progress of All-IP deployment. Its importance lies in promoting the transformation and profitability of operator services. In this sense, MSCG can be regarded as the engine of All-IP multi-service operation.

Even though the causes of Italy’s cram remain unknown yet, it is true that hundreds of thousands of people from across the globe come to this land to revel its glorious aspects and artifacts. If you are also one of them, have come to the country for the first time and are looking worried regarding transport, http://www.121carhireitaly.com/ is there to help at any time. Truly it is your best option for
121 car hire italy
How can the very website help you? Well, the website is known for best researches regarding all types of car rentals in seconds, ranging from miniature, luxury, prestige, 7- seater to sports car rentals. What’s more, the innate features of the website can help you assessing all key Italian car hire companies and find out the best car rental deals at the moment.

Even if you are specific and want to avail the best info regarding
121 car hire Brindisi Airport and
121 car hire Cagliari Airport, the website can help you to discover the reality within minutes. It’s true that many people love to visit specific areas and not the entire country. In that case the website can help you by searching the top deals on car hire through making a meticulous comparison of dozens of car hire websites with one simple click